restricted file_uploads to authenticated users only.